From the course: Security Frameworks Fundamentals
Join today to access over 26,100 courses taught by industry experts.
ISO 27001/2: A global approach with certification
From the course: Security Frameworks Fundamentals
ISO 27001/2: A global approach with certification
- [Instructor] ISO 27001 is an information security standard that positions information security under management control and outlines specific requirements. It specifically aims to put an information security management system, or ISMS, in place to ensure comprehensive coverage of all assets and data. That means it's not just IT. Things such as paperwork and proprietary knowledge are included as well. ISO 27002 is a supporting standard that outlines how controls in the ISMS can be implemented. This standard is published jointly by ISO, or the International Organization for Standardization; and the IEC, or International Electrotechnical Commission. ISO 27001 does not formally mandate specific controls. It allows for flexibility. Organizations can choose which ones are applicable controls by doing a comprehensive assessment of its risks. Further, companies are not required to mitigate all risks. All that is required is to…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.